usite-sas-bic/whatsapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

conversations: fix auth con isUserLoggedIn + escapar comillas dobles y backticks en onclick

Browse Source
This commit is contained in:
Lizandro Guarnizo
2026-03-19 07:55:31 -05:00
parent dd8d4f9e67
commit 0faf101fd1
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conversations.php
+5 -4
View File
@@ -1,8 +1,9 @@
<?php <?php
session_start(); session_start();
require_once 'config/config.php';
// Verificar autenticación // Verificar autenticación igual que el resto del sistema
if (!isset($_SESSION['user_id'])) { if (!isUserLoggedIn()) {
header('Location: login.php'); header('Location: login.php');
exit; exit;
} }
@@ -2762,8 +2763,8 @@ if (!isset($_SESSION['user_id'])) {
const unreadClass = (conv.unread_count && conv.unread_count > 0 && !isActive) ? 'unread' : ''; const unreadClass = (conv.unread_count && conv.unread_count > 0 && !isActive) ? 'unread' : '';
const attentionClass = conv.advisor_requested ? ' attention' : ''; const attentionClass = conv.advisor_requested ? ' attention' : '';
// Escapar apóstrofes/comillas en nombre y teléfono para no romper el onclick // Escapar caracteres especiales en nombre y teléfono para no romper el onclick
const safeName = (conv.name || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'"); const safeName = (conv.name || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'").replace(/"/g, '&quot;').replace(/`/g, '\\`');
const safePhone = (conv.phone_number || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'"); const safePhone = (conv.phone_number || '').replace(/\\/g, '\\\\').replace(/'/g, "\\'");
return ` return `
<div class="conversation-item ${isActive} ${unreadClass}${attentionClass}" data-user-id="${conv.user_id}" onclick="chat.openConversation(${conv.user_id}, '${safeName}', '${safePhone}')"> <div class="conversation-item ${isActive} ${unreadClass}${attentionClass}" data-user-id="${conv.user_id}" onclick="chat.openConversation(${conv.user_id}, '${safeName}', '${safePhone}')">